GetSecurityDescriptor method of the __SystemSecurity class

The GetSecurityDescriptor method gets the security descriptor that controls access to the WMI namespace to which you are connected. The security descriptor is returned as an instance of__SecurityDescriptor. For more information, see Changing Access Security on Securable Objects.


uint32 GetSecurityDescriptor(
  [out] __SystemSecurity Descriptor


Descriptor [out]

The security descriptor associated with the WMI namespace.

Return value

Returns one of the values listed in the following list, or a different value to indicate an error. For more information, see WMI Return Codes or WbemErrorEnum.


Successful completion.


The user does not have access to the requested information.


Unknown failure.


The user does not have adequate privileges to execute the method.


A parameter specified in the method call is not valid.


The Win32_SecurityDescriptor instance represents a SECURITY_DESCRIPTOR_CONTROL data type and contains a discretionary access control list (DACL) and a system access control list (SACL). For more information, see Access Control Lists.

If the SeSecurityPrivilege is not granted or enabled when getting a security descriptor, then only the DACL is returned in the returned security descriptor. For more information, see Privilege Constants and Executing Privileged Operations.


Minimum supported client
Windows Vista
Minimum supported server
Windows Server 2008
All WMI namespaces

See also


Setting Namepace Security Descriptors